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Abstract — In order to more effectively cope with 
the real-world problems of vagueness, fuzzy discrete 
event systems (FDESs) were proposed recently, and the 
supervisory control theory of FDESs was developed. 
In view of the importance of failure diagnosis, in this 
paper, we present an approach of the failure diagnosis 
in the framework of FDESs. More specifically: (1) We 
formalize the definition of diagnosability for FDESs, 
in which the observable set and failure set of events 
are fuzzy, that is, each event has certain degree to 
be observable and unobservable, and, also, each event 
may possess different possibility of failure occurring. 
(2) Through the construction of observability-based 
diagnosers of FDESs, we investigate its some basic 
properties. In particular, we present a necessary and 
sufficient condition for diagnosability of FDESs. (3) 
Some examples serving to illuminate the applications of 
the diagnosability of FDESs are described. To conclude, 
some related issues are raised for further consideration. 



Index Terms — Discrete event systems, failure detec- 
tion, fault diagnosis, fuzzy finite automata. 



This work was supported in part by the National Natural 
Science Foundation under Grant 90303024 and Grant 60573006, 
the Higher School Doctoral Subject Foundation of Ministry 
of Education under Grant 20050558015, and the Guangdong 
Province Natural Science Foundation under Grant 020146 and 
Grant 031541 of China. 

Corresponding author (D. Qiu). 

E-mail addresses: issqdw@mail.sysu.edu.cn (D. Qiu); li- 
ufch@gdut.edu.cn (F. Liu) 



I. Introduction 

A discrete event system (DES) is a dynamical 
system whose state space is discrete and whose 
states can only change as a result of asynchronous 
occurrence of instantaneous events over time. Up to 
now, DESs have been successfully applied to many 
engineering fields [4]. In most of engineering appli- 
cations, the states of a DES are crisp. However, this is 
not the case in many other applications in complex 
systems such as biomedical systems and economic 
systems. For example, it is vague when a man's 
condition of the body is said to be "good". Moreover, 
it is imprecise to say at what point exactly a man has 
changed from state "good" to state "poor". Therefore, 
Lin and Ying [18,19] initiated significantly the study 
of fuzzy discrete event systems (FDESs) by com- 
bining fuzzy set theory with crisp DESs. Notably, 
FDESs have been applied to biomedical control for 
HIV/AIDS treatment planning [20,21]. And R. Huq 
et al have presented a novel intelligent sensory infor- 
mation processing using FDESs for robotic control 
recently [10, 11]. 

As Lin and Ying [19] pointed out, a comprehensive 
theory of FDESs still needs to be set up, including 
many important concepts, methods and theorems, 
such as controllability, observability, and optimal 
control. These issues have been partially investigated 
in [2, 3, 28]. Qiu [28] established the supervisory 
control theory of FDESs, and found a method of 
checking the existence of supervisors for FDESs; 
and independently, Cao and Ying [2, 3] significantly 
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developed FDESs. As a continuation, this paper is to 
deal with the failure diagnosis for FDESs. 

It is well known that the issues of diagnosability 
for DESs are of practical and theoretical importance, 
and have received extensive attention in recent years 
[5-9,12,13,15-17,23-27,29-39]. However, the observ- 
ability and the failure set of events in the literature 
are usually crisp. Motivated by the fuzziness of 
observability for some events in real-life situation, in 
this paper, the observable set and failure set of events 
are fuzzy- That is, each event has certain degree to 
be observable and unobservable, and, also, each event 
may possess different possibility of failure occurring. 
We formalize the definition of diagnosability for 
FDESs using the fuzzy observable set and the fuzzy 
failure set of events. 

Generally speaking, a fuzzy language generated by 
a fuzzy finite automaton is said to be diagnosable if, 
based on the degree of observability and the possi- 
bility of failure occurring on events, the occurrence 
of failures can be always detected within a finite 
delay according to the observed information of the 
traces. Through the construction of observability- 
based diagnosers of FDESs, we investigate some 
basic properties concerning the diagnosers. In partic- 
ular, we present a necessary and sufficient condition 
for diagnosability of FDESs, that is, a fuzzy language 
is Fj-diagnosable if and only if there are no F{- 
indeterminate cycles in the diagnoser with respect 
to each event. Our results may better deal with the 
problems of fuzziness, impreciseness and subjectivity 
in the failure diagnosis, and, generalize the important 
consequences in classical DESs introduced by Sam- 
path et al in their seminal works [31, 32]. In order 
to illustrate the applications of the diagnosability of 
FDESs, some examples are provided to illuminate 
the results derived. 

This paper is organized as follows. Section II 
recalls some preliminaries and notations concerning 
FDESs. In Section III, an approach to defining di- 



agnosability for FDESs is presented. In Section IV, 
we construct the observability-based diagnosers of 
FDESs, and some main properties of the diagnosers 
are investigated. In particular, we present a necessary 
and sufficient condition for diagnosability of FDESs. 
Finally, some examples are provided to illustrate the 
condition of diagnosability for FDESs in Section V. 
To conclude, in Section VI, we summarize the main 
results of the paper and address some related issues. 

II. Preliminaries 

In this section, we briefly recall some preliminar- 
ies regarding fuzzy finite automata. For a detailed 
introduction, we may refer to [18, 19, 28]. 

In the setting of FDESs, a fuzzy state is repre- 
sented as a vector [a±, d2, • • • , a n ], which stands for 
the possibility distributions over crisp states, that is, 
ai E [0, 1] represents the possibility that the system 
is in the ith crisp state, (i = 1, 2, ■ ■ ■ , n). Similarly, 
a fuzzy event is denoted by a matrices a = [aij] nxn , 
and a>ij G [0, 1] means the possibility for the system 
to transfer from the ith crisp state to the jth crisp 
state when event a occurs, and n is the number of all 
possible crisp states. Hence, a fuzzy finite automaton 
is defined as follows. 

Definition 1 [28]: A fuzzy finite automaton is a 
fuzzy system 

G = (Q,E,6,q ), 

where Q is the set of some state vectors (fuzzy states) 
over crisp state set; go is the initial fuzzy state; £ is 
the set of matrices (fuzzy events); 5 : Q x £ — > Q is 
a transition function which is defined by 5(q, a) = 
q a for q G Q and a G £, where denotes the 
max-min operation in fuzzy set theory [14]. 

Remark 1: The transition function 5 can be natu- 
rally extended to Q x E* in the following manner: 

%,e)=g, S(q,sa) = 6(6(q,s),a), 

where E* is the Kleene closure of E, e denotes the 
empty string, q G Q, a G E and s G E*. Moreover, 
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S can be regarded as a partial transition function 
in practice. In biomedical engineering [20], for ex- 
ample, although many treatments (fuzzy events) are 
available for a patient, but in fact, only one or a 
few treatments are adopted by doctors according to 
the patient's conditions (fuzzy states). We can see 
Example 2 later for details. 

The fuzzy languages generated by G is denoted by 
Cq or £ for simplicity [28], which is a function from 
S* to [0, 1]. Let s e £*. The postlanguage of £ after 
s is the set of continuations of s in all physically 
possible traces, i.e., 

£/s = {t G S* : (3q G Q)[S{q ,st) = qA£{st) > 0]}. 

From [18, 19, 28], we know that each fuzzy event 
is associated with a degree of controllability, so, the 
uncontrollable set S uc and controllable set S c are 
two fuzzy subsets of S, and satisfy: for any a G S, 

S uc (a) + E c (<7) = 1. 

Analogously, we think that each fuzzy event is asso- 
ciated with a degree of observability. For instance, 
for some treatments (fuzzy events) in biomedical 
systems modelled by a fuzzy finite automaton, some 
effects are observable (headache disappears, for ex- 
ample), but some are unobservable (for instance, 
some potential side effects of treatment). Therefore, 
the unobservable set T, uo and observable set S„ are 
two fuzzy subsets of S, too, and satisfy: for any 
a G % 

S uo (a) + S (<t) = 1. (1) 

Furthermore, we define S (e) = 0, and 

E (s) = min{S (ai) : i = 1, 2, . . . , m} (2) 

for s = o\02 ■ ■ ■ cr m G £*. 

We define the maximal observable set S mo , which 
is composed of the events that have the greatest 
degree of observability among S, i.e., 

S mo = {a G E : (Va € £)[S (<t) > S (a)]}. (3) 



Let £g(q) is the set of all traces that originate from 
fuzzy state q. Denote 

£!(q,a) = {a G S n : 

(a G S mo ) V [S (a) > S (a)]}, 

£ 2 (g,<r) ={«a€Aj(g):(||«||>l) 

A[E (a)>M (tt)]A[aeA((/,a)]}, 

(5) 

where || u || denotes the length of string u, and 
M Q (n) = max{S (o") : a G u}. Intuitively, £i(g, cr) 
collects all of single fuzzy event whose degree of 
observability is either the greatest among S or greater 
than T> (a). And £2(q,a) consists of the strings ua 
containing at least two fuzzy events, in which the 
degree of observability for any event of u is less than 
or equal to that of a and a G £i(q, cr). We denote 

£(q,a) = £ 1 (q,a)U £ 2 (q,a), (6) 
£ a (q,v) = {s e £(q,a) : s f = a} , (7) 

where £ a (q,a) represents those strings in £(q,a) 
that end with event a. 

III. Approaches to Defining Diagnosability 
FOR FDESs 

In this section, we will give a definition of the 
diagnosability for FDESs using the fuzzy observable 
set S D and the fuzzy failure set Sj. 

As mentioned above, in biomedical systems mod- 
elled by a fuzzy finite automaton, some effects are 
observable, but some are unobservable, even some 
effects are undesired failures (for example, some 
potential side effects). Therefore, in the setting of 
FDESs, the failure set of events, as a subset of the 
unobservable set T, uo , is also regarded as a fuzzy 
subset of S. We denote it as S/, and, for each fuzzy 
event a £ S, Sj(cr) represents the possibility of the 
failure occurring on a. Since diagnosis is generally 
based on the unobservable failures [31,32,36], with- 
out loss of generality, we can assume that SjCS uo , 
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that is, £ f(a) < £ uo (cr) for any cr G £, which means 
that failures are always unobservable. 

Usually, the failure set Ej is partitioned into a set 
of failure types /i, f 2 , . . . , f m , i.e., 

S/ = S /l US /a U...US /ra (8) 

where is Zadeh fuzzy OR operator [14], that is, 

£/(cr) = max j£/. (cr) : i = 1, 2, . . . , mj 

for any cr G X*. Let s/ denote the final fuzzy event 
of s G £*. We define 

= {s G £* : (3g€ Q) [%>,*) = q] 
A[£(s)>0] A [£ /4 ( S/ ) >£/>)]}. 

(9) 

Intuitively, * CT (E^.) is the set of all physically possi- 
ble traces that end in a event on which the possibility 
of failure of type /j occurring is not less than £ (cr). 

When a string of events occurs in a system, the 
events sequence is filtered by a projection based on 
their degrees of observability. 

Definition 2: For a G E, the a -projection P a : 
E* — > E* is defined as: For any a G E and s G £*, 

a, if a G S mo or £ (a) > E (cj), 

e, otherwise, 

(10) 

andP CT (e) = e, P CT (sa) = P CT (s)P CT (a). 
The inverse projection operator is given by: 

P-\y) ={ S GS*:(3gGQ) 

[5(q , S )=q}A[£(s)>0}A[P a (s)=y]}. 

The purpose of a -projection is to erase the events 
whose degree of observability is not greater than 
E (<t) in a string. Especially, when a deterministic 
or nondeterministic finite automaton is regarded as a 
special form of fuzzy finite automaton, then all cr- 
projections are equal, and, all of them degenerate to 
projection P : E* — > E* in the usual manner, which 
simply erases the unobservable events [31, 32]. 

Remark 2: In order to avoid the case that the 
event set of the diagnoser constructed later is null, 
we introduce the maximal observable set E mo in the 



Pa(a) 



definition of o - -projection P c , since it is impossible 
to diagnose the failure using a diagnoser with a null 
event set. 

For the sake of simplicity, we make the following 
two assumptions about the fuzzy automaton G, which 
are similar to those in [31, 32, 36]. 

(A7): Language Lq is live. This means that system 
cannot reach a state without transitions. 

(A2): For any a G E and state q G Q, there exists 
no G N such that || t \\< no for every t G C(q,a). 

Intuitively, assumption (Ai) indicates that there is 
a transition defined at each state, and (A2) means 
that for any event a G E, before generating an event 
whose observability degree is the greatest among E 
or greater than E (cr), G does not generate arbitrarily 
long sequences in which each event's degree of 
observability is less than E (cr). 

In order to compare diagnosability for FDESs 
with that for classical DESs, we recall the definition 
of diagnosability for classical DESs presented by 
Sampath et al [31]. 

Definition 3 [31]: A language L are said to be 
diagnosable with respect to the projection P and the 
partition II f on Ej, if the following holds: 



(Vt G n / )(3n i G N)[Vs G *(E/J] 
(Vt G L/s)[\\ t\\> ni ^D) 



(11) 



where the diagnosability condition function D is 



oj G P _1 [P(st)] => S /s G uj. 



(12) 



The objective of diagnosis for classical DESs is to 
detect the unobservable failures from the record of 
the observed events. As mentioned above, in FDESs, 
the failures may occur on every fuzzy event, only 
their possibilities of failure occurring are different. 
Therefore, the purpose of diagnosis for FDESs is to 
detect the failures from the sequence of the observed 
events, based on the degree of observability and the 
possibility of failure occurring. Now let us give the 
definition of diagnosability for FDESs. 
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Definition 4: Let £ be a language generated by a 
fuzzy finite automaton G = (Q, E, S, qo) and a G S. 
C is said to be Fi-diagnosable with respect to a, if 
there exists rii £ N such that for any s G \I/ CT (E/.) 
and any t E C/s where || £ ||> rij, the following 
holds: 

£/» < minj^H : w G P" 1 ^*))} . (13) 

Denote X faih = [a G E : S/» > o}. If for 
each cr G ^faii,, £ is Pj-diagnosable with respect 
to a, then £ is said to be Fi-diagnosable. 

Intuitively, C being Pj-diagnosable with respect 
to a means that, for any physically possible trace 
s where the possibility that failure of type fi occurs 
on Sf is not less than that on a, any sufficiently long 
continuation t of s, and any trace lo, if u> produces 
the same record by the cr-projection as the trace st, 
then the possibility that failure of type fi occurs on oo 
must be not less than that on a, too. In other words, 
if the failure type fi has occurred on event Sf, then 
fi must also occur on every trace to whose observed 
record is the same as st. 

Remark 3: If the observability and possibility of 
failure occurring of each event are crisp, i.e., E (cr), 
E^.(ct) G {0, 1}, then the definition of diagnosability 
for FDESs reduces to Definition 3, the diagnosability 
for classical DESs presented by Sampath et al [31]. 

We present an example to explain the definition of 
diagnosability for FDESs, and the real-world appli- 
cation example will be given in Example 2 later. 

Example 1. Consider the fuzzy automaton G = 
(Q,T>,5, qo) represented in Fig.l, 

7 

Fig.l. The fuzzy automaton of Example 1. 
where Q = {<? , qi, ■ ■ ■ , q*}, qo = [0.8,0.2], and 



E = {a, P, 7, r, 8} is defined as follows: 
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Note that 5 is defined with max-min operation, we 
can calculate the other fuzzy states: q\ = [0.8,0.4], 
q 2 = [0.4,0.8], q 3 = [0.8,0.6], and q 4 = [0.4,0.4]. 

Suppose that the degree of observability and the 
possibility of failure occurring on each fuzzy event 
are defined as follows: 



E D (a) 


= 0.8, 


SoC9) 


= 0.5, 


£o(7) = 


-- 0.3, 


E o (0) 


= 0.7, 


S (r) = 


= 0.3; 


S/» = 


= 0.2, 




= 0.4, 


%(7) 


= 0.3, 




= 0.3, 


Sa(t) 


= 0.6; 


E /2 (q) 


= 0.1, 


v f M 


= 0.3, 


%(7) 


= 0.4, 


s /2 (0) 


= 0.2, 


S/ 2 (r) 


= 0.5. 



In the following, we will use Definition 4 to verify 
two conclusions: (1) the language C generated by G 
is not Pi-diagnosable with respect to r, but (2) C is 
p2-diagnosable with respect to (3. 

In fact, when a = r, for Vn^ G N, we take 
s = a /3r, t = 9 n > +1 , and take u = a/3j9 ni+1 . 
Obviously, to G P ( 7 1 (P CT (st)), but E/^cr) = 0.6, 
while T.f^io) = 0.4. Therefore, Ineq.(13) does not 
hold, so C is not Pi-diagnosable with respect to r. 

When a = (3, we take rii = 2, then for any s G 
\l/ CT (E/ 2 ), (i.e.,s = a(3, a(3(3, a(3r, or a{3j), and any 
t £ C/s, where || i ||> rij, we have 

P^(P a (st)) = {a(3T0 k ,a(3(3e k ,a(3je k : k > 1}. 

Due to each element in P o r 1 (P (J (si)) containing 
(3, therefore, for any u> G P o r 1 (P cr (st)), we have 
E/ 2 (<r) < E/ 2 (u;), that is, C is P2-diagnosable with 
respect to (3. 
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IV. Necessary and Sufficient Condition of 

DIAGNOSABILITY FOR FDESS 

In this section, through the construction of 
observability-based diagnosers of FDESs, we in- 
vestigate some main properties of the diagnosers. 
In particular, we present a necessary and sufficient 
condition for diagnosability of FDESs. Our results 
not only generalize the significant consequences in 
classical DESs introduced by Sampath et al [31], but 
also may better deal with the problems of vagueness 
in real-world situation. Example 2 in Section V 
verifies this view to a certain degree. 

A. Construction of the Diagnosers 

We firstly present the construction of the 
observability-based diagnoser, which is a finite au- 
tomaton built on fuzzy finite automaton G. 

Denote the set of possible failure labels as A = 
{N} U 2 A f, where N stands for "normal", and 2 A f 
denotes the power set of Af = {F±, • • • , F m } [31]. 
For we define a subset of Q as 

Qa ={go}u{geQ: (3q eQ)(3ae£) 
[S(q',a) = q A a G Ci(q,a)]}, 

(14) 

i.e., Q a is composed of the initial state qo and the 
states reachable from one event whose degree of 
observability is either the greatest among £ or greater 
than S D (cr). 

Definition 5: Let G = (Q,H,8, qo) be a fuzzy 
finite automaton and u£S f ai i . . The diagnoser with 
respect to a is the finite automaton 

G d = (Q d ,X d ,6 d , X o), (15) 

where the initial state xo = {(9o> {-^})}> means that 
the automaton G is normal to start with. The set of 
events of the diagnoser is 

S d = {a G S : (a G £ mo ) V [S (a) > E (<t)]} . 

(16) 



The state space Q d C Q a x A is composed of the 
states reachable from xo under S d . A state x of 
is of the form 

X = (92,4), • • • , (9n,4)} , (17) 

where qi G Qcr and ^ £ A, i.e., ^ is the form 
£i = {N}, or £i = {Fi i: Fi 2 , . . . ,F ik }. And 5 d is 
the partial transition function of the diagnoser, which 
will be constructed in Definition 7. 

Definition 6: The label propagation function LP : 
Q a x A x S* — > A is defined as follows: For q <G 
C} CT , ^ G A, and s G C(q,a), 

LP(q,£,s) 

{ {N},ift = {N} andVi[S A (a) <S A (<7)], 
| {^i : ElVE/,(«) > S/. (a)} , otherwise. 

(18) 

The label propagation function is due to describe 
the changes of label from one state of diagnoser to 
another. Obviously, label Fj is added whenever the 
possibility of the ith type failure occurring on the 
string s is not less than Sj.(cr), and once this label 
is appended, it cannot be removed in the successor 
states of the diagnoser. 

Definition 7: The transition function of the diag- 
noser 5 d : Qd x — > Q d is defined as 

S d ( X ,a)= |J |J {(S(q i ,s),LP(q i ,£ i ,s))}. 

(19) 

For example, 5 d (xo, a) = {(<7i, W), (95, {^i})} 
in Fig. 4 of Example 2. 

B. 5ome Properties of the Diagnosers 

In this subsection, we present some main proper- 
ties of the diagnoser, which will be used to prove the 
condition of the diagnosability for FDESs. 

Property 1: Let G = (Q, S, 5, qo) be a fuzzy finite 
automaton, and let Gd = (Q d ,T, d ,S d ,xo) be the 
diagnoser with respect to a, where a G Sj a ^.. For 
Xi, X2 G Qd, s G £*, if (gi,4) G xi, (92,4) G X2, 
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%i, s) = q 2 , S d (xi,Pa{s)) = X2, then P; G 4 
implies Pj G l 2 . 

Proof: It can be directly verified from Defini- 
tions 6 and Definitions 7. ■ 

Property 2: If x G Q d , then (gi,4), (q 2 ,h) G 
X if and only if there exist Si,s 2 £ such 
that ( Sl ) f = (s 2 ) f G £ d , P a ( Sl ) = P a (s 2 ), 
$d(xo, Pa(si)) = X, and for k = 1,2, C(s k ) > 0, 

S(qo,s k )=qk, LP(q ,{N} ,s k ) = £ k . 

Proof: Necessity: If % G Q d , then there are 
ai,...,a,j G £ rf and xi, ■ ■ ■ , Xj-i G <2d, such that 
*d(Xi> Oi+i) = Xi+i, where < i < j - 1 and Xj = 
X- From the assumption that (gi,4), (g 2 ,4) G X, 
there exist (gf , ^) € Xj-i. and *i G (gf , <r) (fc = 
1,2) such that for fc = 1,2, 

Similarly, note that 5 d (Xj- 2 , = Xj-i> hence, 

there are (gf , G Xj-2, and ^ G (gf , a) (A; = 
1, 2) satisfying for k = 1, 2, 

9l fc = £ k = LP(q k ,£ k ,t k ). 



With the analogous process, there are (qj_ 1 ,lj_ 1 ) G 
Xi, t) G £ fll (g , o-) (k = 1, 2) such that for k = 1,2, 

q)_ x = S(q ,t k ), = LP(q ,{N},t k ). 

We take 

s k = t k t k _ 1 ...t k t k l , (A; = 1,2). (20) 

Obviously, <5 d (xo, -Po-(si)) = x> = (s 2 ) f = 

a,j G E d and for k = 1,2, we have C(s k ) > 0, 
%o, Sfc) = gfc, PP(*), {N} , s k ) = 4. Moreover 

P<t(si) = oia 2 . . . aj = P CT (s 2 ). 

Sufficiency: Assume that there exist si,s 2 G £* 
satisfying £(si) > 0, C{s 2 ) > and P a (s{) = 
P a (s 2 ). From 6 d (xo, P<r( s i)) = X> we denote 

P a (si) = aia 2 . . . ctj, 



then we can obtain a state sequence 
Xi>X2,---,Xj-i G Q d such that 8 d (xi,a i+1 ) = 
Xi+i, where < i < j — 1 and Xj = X- Furthermore, 
from 5(q ,s k ) = q k , and LP(q , {N} , s k ) = 4, 
(k = 1,2), we have that (gi,4), (g 2 ,4) G x by 
Definition 7. ■ 

Remark 4: In the proof of Necessity, it is possible 
that (q\,l\) is the same as (q\,l\) for some h, but 
it does not concern the proof. 

Definition 8: Let G d = {Q d , E d , 5 d , xo) be the 
diagnoser with respect to a. A state x G is said 
to be Fi-certain if either Fi G t for all (q, I) G x> 
or Fi G" for all (g, .£) G x- And x is said to be 
Fi-uncertain , if there are (gi,4), (?2>4) G x such 
that Fi G £1 and Pj g £ 2 . 

For example, xi = {(gi, {P 2 }), (g 5 , {Pi, P 2 })} 
and X2 = {(g 2 ,{P 2 }),(g6,{Pi,P 2 })} in Fig.8 are 
both p2-certain and Pi -uncertain states. 

Property 3: Let G d = (Q d ,Y> d ,5 d ,xo) be the 
diagnoser with respect to a and S d (xo,u) = x- If 
X is Pj-certain, then either E A (s) > E A (<r) for all 
s G P~ l {u), or £ A (s) < E A (<j) for all s G P" 1 ^)* 
where Sf G £ d . 

Proof: By contradiction, suppose there exist 
si,S2 G P o r 1 (u) such that 

E A (si) > £/» > £ A (s 2 ) 

where (si)/,(s 2 )/ G E d . Denote 

LP(g , {iV} , Sl ) = h, LP(q , {N} , s 2 ) = £ 2 , 

then from Definition 6, we know that Pj G l\, but 
Pi G" h- By Property 2, we have (gi,4), (g 2 , ^2) G 
X, where <5(g ,si) = gi and 5(q ,s 2 ) = q 2 . That is, 
X is Pj-uncertain. ■ 
Property 4: Let G d = (Q d , E d , <5 d , xo) be the 
diagnoser with respect to a and (5 d (xo, u ) = X- 
If x is Pi-uncertain, then there exist si,s 2 G E* 
such that (si)f = (s 2 ) f G E d , P CT (si) = P CT (s 2 ), 
5d(xo,P CT (si)) = X, and 

S A ( Sl )>E A (a)>E A ( S2 ). (21) 



DIAGNOSABILITY OF FUZZY DISCRETE EVENT SYSTEMS 



8 



Proof: It is straight obtained by Property 3. ■ 

Property 5: Let G d = {Qd,^d,$d,Xo) be the 
diagnoser with respect to a. If the set of states in 
Qd forms a cycle in Gd, then all states in the cycle 
have the same failure label. 

Proof: It is easy to prove since any two states 
in a cycle of Gd are reachable from each other, and 
once a failure label is appended, it cannot be removed 
in all successors. ■ 

C. Necessary and Sufficient Condition of Diagnos- 
ability for FDESs 

In this subsection, we present an approach of 
failure diagnosis in the framework of FDESs, and 
a necessary and sufficient condition of the diagnos- 
ability for FDESs is obtained. 

We may define an F{ -indeterminate cycle in diag- 
noses for FDESs, just as for classical DESs. 

Definition 9: Let G d = (Qd,^d,^d,Xo) be the 
diagnoser with respect to a. A set of Fj-uncertain 
states xi, X2, ■ ■ ■ ,Xk € Qd is said to form an F- 
indeterminate cycle if 

(1) Xi, X2, ■ ■ ■ ,Xk form a cycle in G d , i.e., there is 
cfj G T, d such that 5 d (xj,(Tj) = X(j+i) mod fc, where 
j = 1,... , k. 

(2) 3 (a#, 1% dj) G xj (j G [1, % h G [1, m]; 
r G [1, n]) such that 

1) Fi G I) but Fi for all j, h, r; 

2) The sequences of states jx^ j and jyj} form 
cycles respectively in G with 

^xj.ajo-j) = € [l,fc - l];/i € [l,m]), 

S(xls h k a k )=x1 +1 ,(he[l,m-l\), 

and 5(x™, s£Vfc) = x\; 

5{y r j ,f j a j ) = y r j+1 , (j G [1, k - 1]; r € [1, n]), 
%J-,tW)=yI +1 ,(r€[l,n-l]), 

and 5(y^,qa k ) = y\, 
where s^dj G C(xj,a), t^Uj G £(yj,cr). 



Intuitively, an Fj -indeterminate cycle in is a 
cycle composed of Fj -uncertain states where, cor- 
responding to this cycle, there exist two sequences 
{x^ | and jyj} forming cycles of G, in which one 
carries and the other does not carry failure label Fj. 

Now we can present a necessary and sufficient 
condition of the diagnosability for FDEs. 

Theorem 1: A fuzzy language C generated by a 
fuzzy finite automaton G is Fj-diagnosable if and 
only if for any a G £/ jj 4 , the diagnoser G d with 
respect to a satisfies the condition: There are no Fj- 
indeterminate cycles in G d . 

Proof: Necessity: We prove it by contradiction. 
Assume that C is Fj-diagnosable, and there is an Fj- 
indeterminate cycle Xi,X2, ■ ■ ■ ,Xk in diagnoser Gd 
with respect to a, where a G ^faih- By Definition 
9, the corresponding sequences of states ja^} and 
{yjj form two cycles in G, and the corresponding 
strings SjO-j and t^aj satisfy condition 2) of Defi- 
nition 9, where (a#,£*), G Xj, and F € ^ 
but Fj ^ for all j = 1, ■ ■ ■ ,k; h = 1, • • ■ , m; 
r = 1, • • • , n. 

Since (x{, £\), (y\, d\) G xi> f rom Property 2, 
there exist so>*o £ ^* suc h that Po-(so) = F CT (to), 
<5(<70) s o) = x\, and <5((ft),io) = y\- Notice that 
Fj G l\ and Fj cZ£ for all j, r. Therefore, we have 
S /i (t )<S /i ( < 7), and 

E /4 (5 ) ^(a)^^-). (22) 

Let Z be arbitrarily large. We consider the follow- 
ing two traces 

wi = s (si<ti . . • s\u k . . . aJVi . . . sfa k ) ln , (23) 

0J 2 = t (tl<7l . • • i£<7fc • • . *?<7l . • • ^ fe )<™ (24) 

Then £(wi) > 0, £(w 2 ) > and 

P ff (wi) = P„{u 2 ) = F^so)^!^ . . . a k ) lmn . (25) 

Because Sj. (so) > X / ; (<r), there is a prefix s of sq 
such that s G * CT (S/.). Take t £ £/s where wi = si, 
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then from (25), we know uj 2 G P~ 1 {P (T {st)). But 
from Ineqs.(22), and 

max{S/ 4 (t ),S/ i (tJ(7 i? -) : j = 1,- ■ ■ ,k;r = 1, ■ •• ,n} 

we have Tlf.(u 2 ) < Sj.(<j). That is, £ is not Fj- 
diagnosable, which contradicts the assumption. 

Sufficiency: Assume that there are no Fj- 
indeterminate cycles in diagnoser Gd with respect to 
a, where a G ^f a u r The proof of sufficiency will be 
completed by following two steps: (1) xo can reach 
an Fi -certain state after a finite number of transitions; 
(2) C is F; -diagnosable with respect to a. 

(1) Firstly, we verify that xo can reach an Fj- 
certain state after a finite number of transitions. 

For simplicity, if (q, £),(q,£) G x> and Fi G £, 
Fi £ £' , we shall denote q as "x-state" of x an d q 
as "y-state" of x, respectively. Let s G VE^E/J and 
<5(<7o,s) = q- From Assumption (A2), there exists 
no G JV such that || t\ ||< no for any t\ G C(q,a). 

Denote % ,s*i) = 9i. *d(xo, -P<r(^i)) = Xi» 
then <7i is an "x-state" since s G VE^E/.) implies 

2^(5*!) >S A ((7). 

The desired result is obtained if xi is Fj-certain. 
So the following is to prove the desired result under 
the assumption that xi is Fj-uncertain. Since there 
are no Fj -indeterminate cycles in Gd, one of the 
following is true: (i) there are no cycles of Fj- 
uncertain states in Gd, or (ii) there is one or more 
cycles of Fj-uncertain states in Gd but corresponding 
to such cycle, there do not exist two sequences of "re- 
states" and of "y-states" forming cycles in G. 

Case (i): Suppose that there are no cycles of Fj- 
uncertain states in Gd, which means Fj-uncertain 
states will reach an Fj-certain state by Assumption 
(Al) and Property 1. Therefore, there is sufficiently 
long t 2 G C G {qi) such that S d (xo, Pa(sht 2 )) is an 
Fj-certain state. 

Case (ii): Suppose that there is a cycle of Fj- 
uncertain states xi) X2, ■ ■ ■ , Xk in Gd, but corre- 
spondingly to such cycle, there do not exist two 



sequences of "x-states" and of "y-states" forming 
cycles in G. The following will prove that this case 
is impossible. In fact, there is an "x-state" q 2 of X2 
such that q 2 is a successor of qi since q\ is an "x- 
state" of xi- Similarly, there is an "x-state" q% of X3 

such that q% is a successor of q 2 So, we obtain 

a sequence {qi, q 2 , ■ ■ •} of "x-states" which forms 
cycles in G. With the analogous process, we can 
obtain a sequence of "y-states" which forms cycles 
in G, too. That is, Case (ii) is impossible. 

Above inference indicates that xo must reach an 
Fj-certain state within a finite steps (denoted by mo) 
of transitions, no matter whether xi is Fj-certain or 
not. 

(2) From (1), we take rii = rriQ, then for any s G 
^> a (Yif.) and any t G C/s where || t \\> rii, xo must 
lead to an Fj-certain state. That is, whenever u> G 
F ( 7 1 (F CT (st)), it always holds that S/.(cr) < E/ 4 (w). 
Therefore, £ is Fj-diagnosable with respect to a. ■ 

From the proof of Theorem 1, we know that 
Theorem 1 can be precisely described as follows. 

Theorem 2: A fuzzy language C generated by a 
fuzzy finite automaton G is Fj— diagnosable with 
respect to a G if and only if the diagnoser 

Gd with respect to a satisfies the condition: There 
are no Fj— indeterminate cycles in Gd- 

Proof: It has been shown in the proof of 
Theorem 1. ■ 

V. Examples of Diagnosability for FDESs 

In this section, we will give some examples to 
illustrate the process of testing the necessary and 
sufficient condition for the diagnosability of FDESs 
presented above, which may be viewed as an ap- 
plicable background of diagnosability for FDESs. 
Examples 2 and 3 are diagnosability for FDESs with 
single failure type: one is diagnosable but the other 
is not diagnosable. Example 4 is considered as an 
FDES with multiple failure types. For simplicity, the 
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fuzzy events (matrices) used are all upper or lower 
triangular matrices. 

Example 2. Let us use a fuzzy automaton G = 
(Q, S, S, qo) to model a patient's body condition. For 
simplicity, we consider patient's condition roughly 
to be three cases, i.e., "poor" , "fair", and "excel- 
lent". Suppose that patient's initial condition (initial 
fuzzy state) is qo = [0.9, 0.1, 0], which means that 
the patient is in a state with possibility of 0.9 for 
"poor", 0.1 for "fair" and for "excellent". Suppose 
that there are three treatments to choose for doctor, 
denoted as a, [3 and 7, which are defined as follows: 



a 




0.4 


0.9 


0.4 




0.4 











0.4 


0.4 


,0 = 


0.9 


0.4 











0.4 




0.4 


0.4 


0.4 






' 0.9 


0.9 


0.4 " 








7 = 





0.4 


0.4 
















0.4 







In general, it is possible that patient's condition 
turns better or worse after each treatment, which may 
be evaluated by means of experience and medical 
theory. For instance, fuzzy event a means that, after 
this treatment, the possibilities that patient's status 
changes from "poor" to "poor", "fair" and "excellent" 
are 0.4, 0.9 and 0.4; the possibilities from "fair" to 
"poor", "fair" and "excellent" are 0, 0.4 and 0.4; and 
the possibilities from "excellent" to "poor", "fair" 
and "excellent" are 0, and 0.4, respectively. Fuzzy 
events (3 and 7 have similar interpretations. 

Assume that doctor's strategy for patient's treat- 
ment is described by Fig.2. From qo = [0.9, 0.1, 0], 
we can calculate the other fuzzy states using the 
transition function 5 as: qi = [0.4, 0.9, 0.4], 

q 2 = [0.9, 0.4, 0.4], q 3 = [0.9, 0.9, 0.4], 
q 4 = [0.4, 0.1, 0], q 5 = [0.4, 0.4, 0.4]. 




Fig.2. The fuzzy automaton of Example 2. 

Fig.2 means that, if the patient obtains the first 
treatment being a or (3, then his (or her) state changes 
into qi or q^. After treatment (3 in condition qi, the 
state will change from q\ to q 2 . And then, the patient 
will turn into state q 3 after treatment 7. If treatment 
a is adopted in state q%, then the patient returns 
to condition q±. Similarly, when the patient obtains 
treatment a in q±, the state will turn to q$. And the 
patient's condition will be unchanged if he or she 
obtains treatment a in q§. 

As mentioned above, for each treatment (fuzzy 
event), some effects are observable, but some are 
unobservable, even if some are undesired failures 
(for example, some potential side effects). Therefore, 
each fuzzy event has certain degrees of observable 
and unobservable, and, also, each fuzzy event may 
possess different possibility of failure occurring. 
Assume that the degree of observability and the 
possibility of failure occurring for each fuzzy event 
are defined: 

S (q) = 0.6, £„(/?) = 0.4, S ( 7 ) = 0.7; 
X fl (a) = 0.1, £/,(/?) = 0.2, S /l ( 7 ) = 0.3. 

Now, in order to detect the occurrence of failure, we 
construct the diagnosers with respect to each a G 
Zf a a., where S/ aiJj = {a,(3,j}. 

(1). When a = a, the a-projection P a is deter- 
mined by P a (a) = P a {!3) = e, P a (j) = 7, and 
the set of events for the diagnoser is = {7}. 
According to Definition 5, the diagnoser with 
respect to a is constructed in Fig. 3. Obviously, there 
are no F\ -indeterminate cycles in Gd- Therefore, by 
Theorem 2, C is Fi-diagnosable with respect to a. 
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In fact, due to S/^a) being the smallest among 
{£^(0) : a € £}, Ineq.(13) naturally holds with 

n, = 0. 



q N 


7 


Q3Fi 






7 



Fig. 3. The diagnoser Gd w.r.t a in Example 2. 

(2) . When a = j3, we have P CT (a) = a, P a {(3) = e, 
P a {^) = 7 and Srf = {0,7}. And the diagnoser Gd 
with respect to is constructed in Fig.4. Obviously, 
C is Fi-diagnosable with respect to (3 for no F\- 
indeterminate cycles in Gd- In fact, Ineq.(13) holds 
with rii = 1. 

(3) . When a = 7, we have P a (a) = P a ((3) = e, 
^■(7) = 7 an d = {7}. For no F\ -indeterminate 
cycles in the diagnoser Gd with respect to 7 con- 
structed in Fig.5, C is Fi-diagnosable with respect 
to 7. 

Therefore, C is Fi-diagnosable. That is, the occur- 
rence of failure can be detected within finite delay. 



q N 



a 



7 



a 



q 5 Fi 




a 



Q3Fi 



a 



qiFi 



7 

Fig.4. The diagnoser Gd w.r.t /3 in Example 2. 



q N 


7 


<73 Fi 






7 



Fig.5. The diagnoser Gd w.r.t 7 in Example 2. 

Example 3. Consider the fuzzy automaton G 
(Q, S, 6, qo) represented in Fig.6, where Q 
{qo, qi, ■ ■ ■ , gv} is defined as: 



q = [0.9, 0.1, 0], Ql 

q 2 = [0.9, 0.4, 0.4], q 3 

(74 = [0.5, 0.1, 0], q 5 

q 6 = [0.5, 0.4, 0.4], q 7 



[0.4, 0.9, 0.4], 

[0.9, 0.9, 0.4], 

[0.4, 0.5, 0.4], 

[0.5, 0.5, 0.4]. 





a 



Fig.6. The fuzzy automaton of Example 3. 

The set of fuzzy events S = {r, a, /3,7}, where 
r, a, /3,7 are defined as follows: 



T = 







0.5 

0.1 0.1 

0.1 0.1 0.1 

0.4 

0.9 0.4 

0.4 0.4 0.4 



, a = 



,7 



0.4 0.9 0.4 

0.4 0.4 

0.4 

0.9 0.9 0.4 

0.4 0.4 

0.4 



Suppose that S G and are defined as follows: 

E (r) = 0.3, E (a) = 0.5, S (/3) = 0.4, 
S o ( 7 )=0.6; S /l (r)=0.4, S /l (a)=0.1, 
S /l (/3)=0.2, S /l ( 7 )=0.3. 

We can verify that the language £ is not F1- 
diagnosable. In fact, when a = r, for arbitrary 
rii £ A r , we take s = r, t = a(/?7a) ni , and 

= a(/?7a) n 7 and then w € P~ 1 (P CT (st)), but 

S /l (a) = 0.4>0.3>S /l M. 

Therefore, by Definition 4, we know that C is not Fi- 
diagnosable with respect to r. Of course, the result 
can also be obtained by the diagnoser Gd with respect 
to r, which is constructed in Fig.7, since there does 
exist an F\ -indeterminate cycle in Gd- 











q 3 Nq 7 F 1 






a , 






7 


q N 


a 


QiNqsFi 


q 2 Nq 6 F 1 



Fig.7. The diagnoser Gd w.r.t r in Example 3. 
The following is an example of diagnosability for 
an FDES with multiple failure types. 
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Example 4. Consider the fuzzy automaton G = 
(Q,T>,5,qo) described in Example 3. The definition 
of S D is the same as that in Example 3, but S/ = 
which is defined as follows: 

S /l (r) = 0.4, S /l (a)=0.1, %(/?) = 0.2, 
E A ( 7 ) = 0.3; S /2 (r)=0.1, £ /a (a) = 0.2, 
S /2 (/3) = 0.3, S /2 ( 7 ) = 0.4. 

The following is to verify that £ is not Fi- 
diagnosable but iVdiagnosable through constructing 
the diagnosers. 

(1). If a = t, then P CT (r) = e, P a {a) = a, 
P a {(3) = (3, P CT ( 7 ) = 7 and S rf = {a,/3, 7 }. Note 
that in the diagnoser with respect to r constructed 
as Fig. 8, there exists an F\ -indeterminate cycle but 
there do not exist F2 -indeterminate cycles. Therefore, 
£ is not Fi-diagnosable but p2-diagnosable with 
respect to r. Of course, this result can be verified 
by Definition 4, too. For failure type fi, we take 
s = t, t = a((3ja) ni and oj = a((3ja) ni , then 
w € P-^P^st)), but 

£,» = 0.4 > 0.3 > 

For failure type f 2 , since £/ 2 (t) is the least among 
{S/ 2 (a) : a G £}, Ineq.(13) holds with rij = 0. 











q3F 2 q7F 1 F 2 










7 




a 


qiF 2 q 5 F 1 F 2 


Q2F 2 qQFiF 2 



Fig.8. The diagnoser Gd w.r.t r in Example 4. 

(2). If a = a, then P CT (r) = P ff (a) = P CT (/3) = e, 
P(7( 7 ) = 7 and = {7}. Note that there do not 
exist Fl -indeterminate cycles or F 2 — indeterminate 
cycles in the diagnoser with respect to a constructed 
in Fig.9, and C is both Fpdiagnosable and F 2 - 
diagnosable with respect to a. In fact, Ineq.(13) holds 
for failure type f\ with rij = and for f 2 with 
m = 2. 



q N 



1 



q 3 F 1 F 2 q 7 F 1 F 2 




1 



(3). If a = 13, then P a (r) = P a {(3) = e, P a (a) = 
a, Pa{l) = 7> and = {0,7}. There do not exist 
F\ -indeterminate cycles or F2 -indeterminate cycles 
in the diagnoser with respect to (3, which is con- 
structed as Fig. 10, so C is both Fi-diagnosable and 
iVdiagnosable with respect to (3. In fact, Ineq.(13) 
holds for failure types f\ and f 2 with n« = 1. 







0> 




qiF\F 2 q<r ) FiF 2 






7 




a 


q N 


a 


qiNq^ 


q 3 F\F 2 q'jFiF 2 



Fig. 10. The diagnoser Gd w.r.t (3 in Example 4. 

(4). If a = 7, then P a (r) = P a (a) = P a (P) = e, 
P(j( 7 ) = 7, and Srf = {7}. Since there do not exist 
Pi -indeterminate cycles or F 2 — indeterminate cycles 
in the diagnoser with respect to 7 constructed in 
Fig. 11, C is both Pi-diagnosable and P2-diagnosable 
with respect to 7. In fact, Ineq.(13) holds for failure 
type fi with rij = 3 and for f 2 with rn = 0. 

Therefore, by Theorem 1, we know that £ is not 
Pi-diagnosable but p2-diagnosable. 



q N 



qzF\F 2 qjFiF 2 




7 



Fig.9. The diagnoser Gd w.r.t a in Example 4. 



Fig.ll. The diagnoser Gd w.r.t 7 in Example 4. 

VI. Concluding Remarks 

In this paper, we dealt with the diagnosability 
in the framework of FDESs. We formalized the 
definition of diagnosability for FDESs, in which 
the observable set and the failure set of events are 
fuzzy. Then we constructed the observability-based 
diagnosers and investigated its some basic properties. 
In particular, we presented a necessary and sufficient 
condition for diagnosability of FDESs. Our results 
generalized the important consequences in classical 
DESs introduced by Sampath et al [30,31]. More- 
over, the approach proposed in this paper may better 
deal with the problems of fuzziness, impreciseness 
and subjectivity in the failure diagnosis. As well, 
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some examples serving to illuminate the applications 
of the diagnosability of FDESs were described. 

As pointed out above, FDESs have been applied to 
biomedical control for HIV/AIDS treatment planning 
by Lin et al [20,21] and also to intelligent sensory 
information processing for robotics by R. Huq et al 
recently [10, 11]. The potential of applications of the 
results in this paper may be used in those systems. 
Moreover, with the results obtained in this paper, 
a further issue worthy of consideration is the I- 
diagnosability and the ^^-diagnosability of FDESs, 
as those investigated in the frameworks of DESs [30] 
and stochastic DESs [36]. Another important issue is 
how to detect the failures in decentralized FDESs. 
Furthermore, FDESs modeled by fuzzy Petri nets 
[22] still have not been dealt with. We would like 
to consider them in subsequent work. 
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